From 3e7afcb9c3b93716bb4cab91004e23eb87ed9154 Mon Sep 17 00:00:00 2001 From: Artemis Tosini Date: Mon, 23 Feb 2026 14:19:53 -0500 Subject: [PATCH] nixos/nix-daemon: Fix unprivileged tmpfiles rules --- nixos/modules/services/system/nix-daemon.nix | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/nixos/modules/services/system/nix-daemon.nix b/nixos/modules/services/system/nix-daemon.nix index 5798f30ca7b4..bceaf82798fc 100644 --- a/nixos/modules/services/system/nix-daemon.nix +++ b/nixos/modules/services/system/nix-daemon.nix @@ -136,10 +136,11 @@ in }; systemd.tmpfiles.rules = [ - "d /nix/store 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - -" - "Z /nix/var 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - -" - "d /nix/var/nix/builds 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - 7d" - "d /nix/var/nix/daemon-socket 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - -" + "d /nix/store 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - -" + "Z /nix/var 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - -" + "d /nix/var/nix/builds 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} 7d -" + "d /nix/var/nix/daemon-socket 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - -" + "d /nix/var/nix/gc-roots-socket 0755 ${config.nix.daemonUser} ${config.nix.daemonGroup} - -" ]; systemd.services.nix-roots-daemon = {